Measure and improve organisational resilience to social engineering.
Run controlled e-mail, SMS and voice simulations, assess behaviour by role or department, and measure reporting as well as interaction rates. Deploy on-premises where employee-data control is a priority.
From campaign design to behavioural insight.
Campaign management, template and landing-page libraries, multi-channel delivery and per-recipient results — one workspace, on your infrastructure.
Design. Send. Measure. Train.
Design
Select an approved scenario from the template library — such as brand impersonation, invoice, MFA reset or HR notice — by department and language.
Send
E-mail, SMS and voice channels; scheduled waves; randomised timing so word-of-mouth does not skew the result.
Measure
Opens, clicks, credential submissions and reports — per person, department and role; heatmap and trend.
Train
Teachable-moment page on click, role-based modules after the wave, quarterly report for leadership.
A measurable security-awareness programme.
Intelligence-informed scenarios
Simulation scenarios can be informed by relevant tactics and pretexts observed through GNSAC threat research.
Controlled employee data
The on-premises deployment keeps campaign data and results in the customer-controlled environment.
Metrics that drive decisions
Report rate alongside click rate — the numbers that show whether a reporting culture is forming.
Pairs with Vigil
Relevant Vigil findings can inform an approved simulation scenario without exposing live sensitive data to participants.
Controlled Phishing Simulation and Awareness
Scenario Templates
Use controlled scenarios reflecting relevant social-engineering techniques and approved campaign objectives.
Campaign Builder
Configure audiences, channels, timing and scenarios within the customer-approved campaign scope.
Analytics Dashboard
Review interaction and reporting metrics by person, role and department.
Training Modules
Interactive training content that educates employees on security best practices.
Risk Scoring
Use behavioural results to identify groups that may require additional support or training.
API Integration
Connect supported HR and security tools through the REST API.
Evaluation and technical review.
Frequently Asked Questions
How realistic are the phishing simulation templates?+
The template library covers controlled credential-entry scenarios, business e-mail compromise examples and brand impersonation. Every campaign remains authorised and aligned with the customer-approved scope.
Can employees tell it's a simulation?+
Simulations are designed to be realistic while remaining controlled, authorised and aligned with the customer's approved campaign scope.
What happens when an employee clicks a simulated phish?+
Campaign owners can present contextual learning content after an interaction and assign role-based follow-up modules according to the approved programme design.
Can I customise campaigns for different departments?+
Yes. You can create targeted campaigns based on department, role, risk level, or any custom grouping. Different groups can receive different template types and difficulty levels.
What metrics and reports are available?+
Available analytics include interaction rate, reporting rate, time to interaction, repeated interactions, department comparisons and trend analysis. Executive summaries support leadership reporting.
Plan a controlled pilot campaign.
Define an authorised audience, select suitable scenarios and review the resulting behavioural baseline with a GNSAC specialist.